Policy install sticks at 35% in FMG 6.0.4

[aagrafi]

Hello,

When I try to install even the simplest change in a policy from FMG to FG, install sticks at 35% with no error message.

Both FG and FMG are in 6.0.4.

After that, the FG appears to be disconnected from FMG, although connectivity FMG to FG is OK.

Any ideas what's going wrong?

Thanks

[brazz_FTNT]

Hey, 

Are you using Management interface on FGT  for FGFM access to the FMG?

Cheers

[aagrafi]

No, the FG does not have MGMT interface (60E) and I'm using the WAN (I have also checked the LAN) interface for that.

[aagrafi]

I think I have found where the problem is. The remote FG was supposed to be in the security fabric under another (root) FG and the fabric was down (connection to the root). When I removed the FG from the fabric, it seems that the problem was resolved.

Don't know if this how it should work in FMG when the FG belongs to a fabric, but I think I have to understand better how the central FMG management works with fabric enabled, because such problems may produce serious disruption in a production network.